e9b9fe719a13f9b05e800043e7a53636c86bfe91efbb0735c18bd992ae5912d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9b9fe719a13f9b05e800043e7a53636c86bfe91efbb0735c18bd992ae5912d2
Size

348KB
MD5

436077940228867e14eb66bc23f80263
SHA1

fb98ebbf5d8d7516a02b061eeb09a40627f9c3d6
SHA256

e9b9fe719a13f9b05e800043e7a53636c86bfe91efbb0735c18bd992ae5912d2
SHA512

cbf44a1b5d4b0623a40be9009155f9d421fb2a2fe0ff4d02ec1141e6751ce3418ebc977e056b1fef901b4fc30b84e9de90511d0966523134ae52fd97726828c2
SSDEEP

6144:j9kSqZZdjX96jGAiqiKNPF8ZSL9bEhVP5I:j9ktZZdXyGAiqirZSaVq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9b9fe719a13f9b05e800043e7a53636c86bfe91efbb0735c18bd992ae5912d2

Files

e9b9fe719a13f9b05e800043e7a53636c86bfe91efbb0735c18bd992ae5912d2
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

n:\Fontes C#\Wdanfe\WinDanfe\obj\x86\Debug\WDanfe.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 343KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ